Key Facts
- The nuclear energy industry is one of the few industries with a security program that is regulated by the federal government. “Nuclear power plants continue to be among the best-protected private sector facilities in the nation,” according to the independent U.S. Nuclear Regulatory Commission. The NRC holds nuclear power plants to the highest security standards of any American industry. Its oversight program includes regional inspectors and at least two resident inspectors at each site.
- Nuclear power plants are very robust structures that, by design and construction, are very difficult to penetrate. The combination of these structures, a well-armed professional security force, strict access controls for workers and visitors, and multiple backup safety systems provides layer-upon-layer of safety and security. It also serves as a serious deterrent to potential attackers.
- Security measures are based on three concentric circles, with the level of security increasing as one gets closer to the reactor. The large outer perimeter, called the “owner-controlled area,” is far enough from the reactor that only minimal security is needed. Other than signs, the security measures in place for the owner-controlled area are not always visible to the public. The “protected area” is fenced and protected by sophisticated security systems and armed security officers. The innermost circle is called the “vital area.” It contains the reactor and associated safety systems, the control room, the used fuel pool, and the main security alarm stations. Access to the vital area is limited and protected by locked and alarmed security doors.
- Every nuclear power plant has an NRC-approved cybersecurity plan. A cyberattack cannot prevent critical systems in a nuclear energy facility from performing their safety functions. Nuclear plant safety systems are completely isolated from the internet and, even if cybersecurity measures were breached, the reactors are designed to shut down safely if necessary.
- Each nuclear plant site has developed an integrated security and response plan with federal, state and local law enforcement agencies and emergency responders who can assist in the unlikely event of an attack.
Nuclear Plant Security Measures
The nuclear energy industry maintains very strict security measures or protocols to prevent unauthorized persons from gaining access to critical equipment or approaching close enough to harm the facility with land or waterborne explosives. Security measures include:
- physical barriers, electronic detection and assessment systems, and illuminated detection zones
- electronic surveillance and physical patrols of the plant perimeter and interior structures
- bullet-resisting, protected positions throughout the plant
- robust barriers to critical areas
- background checks and access control for employees
- highly trained, well-armed security officers
In response to a 2009 NRC rule, the industry increased the amount of live-fire weapons training and the frequency and scope of drills and exercises. This enhanced training ensures that each officer will participate in numerous security drills and exercises facing a mock adversary each year.
Federal Oversight of Nuclear Plant Security
The U.S. Nuclear Regulatory Commission holds nuclear power plants to the highest security standards of any American industry, and the industry exceeds those standards.
In response to public concern over nuclear plant security, Congress included in the Energy Policy Act of 2005 several provisions that increase security requirements or capabilities. This included allowing the NRC to authorize security officers to carry certain advanced weaponry and increasing federal penalties for sabotage and for bringing unauthorized weapons onto a nuclear power plant site. The act also directed the NRC to increase the scope of the “design-basis threat”—that is, the threat against which nuclear power plants must be protected.
The NRC develops the design-basis threat based on its regular interactions with federal intelligence and law enforcement authorities. It is currently characterized as a well-trained and dedicated paramilitary force, armed with automatic weapons and explosives and intent on forcing its way into the plant to commit radiological sabotage. Such a force may have the assistance of an “insider,” who could pass along information and help the attackers. The threat also includes bomb-laden land and waterborne vehicles.
The NRC reviews the design-basis threat each year and, since 2001, has revised it twice to reflect a higher number of possible attackers and greater weapons capabilities. In addition, the NRC conducts regular security briefings for senior executives and security managers in the nuclear industry to ensure they are up-to-date on the latest relevant intelligence.
The terrorist attacks of Sept. 11, 2001, prompted another look at the potential for an airplane crash to cause serious damage. NRC analysis shows that areas of a nuclear power plant housing the reactor and used reactor fuel would withstand the impact of a wide-body commercial aircraft. However, to enhance safety, the agency required nuclear plants to have response procedures to address an aircraft threat or loss of large areas of the facility due to explosions or fire. The NRC’s aircraft impact assessment rule requires design features for new plants to mitigate the effects of an airplane crash, and post-9/11 NRC orders require existing plants to implement similar measures.
The NRC provides regulatory oversight of nuclear power plant security through its routine inspection program as well as evaluations in which a specially trained mock adversary attacks the plant. The agency conducts these force-on-force exercises at each nuclear power plant at least once every three years. The NRC also has at least two resident inspectors at each site.
Controlling Nuclear Power Plant Access
The industry’s authorization program for unescorted access to a nuclear power plant includes an FBI criminal history review; psychological assessments; work, education and credit history reviews; fitness for duty reviews; and pre-access and random drug and alcohol tests. Individuals who are granted unescorted access to a plant’s protected area become part of the industry’s behavioral observation program, which includes behavioral observation by peers and supervisors. Each individual is trained to look for unusual behavior and to report it immediately.
Strict screening is in place for anyone entering the protected area, which is the middle of three concentric security perimeters. Each person—whether they are employees, contractors or visitors—must pass through metal and explosives detectors and all their hand-carried items are screened by X-ray. Security officers search for firearms, explosives, incendiary devices and any other material that could be used for industrial or radiological sabotage. For employees at a nuclear power plant, going through security is part of every workday.
Security measures are especially stringent for the vital area, which contains the reactor and associated safety systems, the control room, used fuel pool, and main security alarm stations. Access to the vital area is protected by card readers, security doors and sometimes staffed guard stations.